Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132392e302f32342d3234203d3e20323132323338.roa
File: 3138352e3235352e3132392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: CJR31S4JDsgn/q8iy6XfKZhoMxgCyBJ8dXO9GHkj9Dw=
Subject key identifier: A6:9C:D5:65:CF:22:05:A5:47:17:14:13:6A:46:50:DA:26:52:A2:E4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0347EA40566A701EAB474C5D5F74F2FFFA8D7259
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132392e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 17 Jun 2025 13:27:55 +0000
ROA not before: Tue 17 Jun 2025 13:22:55 +0000
ROA not after: Tue 16 Jun 2026 13:27:55 +0000
asID: 212238
IP address blocks: 185.255.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:ea:40:56:6a:70:1e:ab:47:4c:5d:5f:74:f2:ff:fa:8d:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 17 13:22:55 2025 GMT
Not After : Jun 16 13:27:55 2026 GMT
Subject: CN=A69CD565CF2205A5471714136A4650DA2652A2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:63:cf:c7:c3:c7:55:82:3b:75:1d:de:47:
81:50:82:55:21:c4:cb:20:04:e5:67:bb:06:aa:c4:
81:9c:46:fd:81:a2:d6:39:fc:5f:77:5b:8b:8a:4f:
7e:c7:5f:3d:1f:14:54:eb:a2:5d:03:72:f2:44:fb:
33:1e:80:51:68:f3:1a:40:52:8a:01:20:df:18:15:
74:b2:58:90:23:d3:8f:26:e4:87:7c:f5:2a:df:19:
00:30:cc:5f:8d:a1:d8:5a:e7:54:24:9a:ad:53:8b:
6f:9d:62:09:9d:8e:ba:af:b1:3f:07:9d:5e:5e:23:
65:a9:6a:f2:b9:1d:f6:b0:85:7d:f1:6b:6f:70:61:
bb:e7:c0:78:95:80:c9:f5:b8:cc:25:c5:90:5d:2f:
17:d3:4c:8c:21:73:0d:97:0c:2b:7c:17:84:4a:c8:
35:30:a9:87:a9:d8:e2:e4:88:45:60:14:8a:5e:04:
a2:71:18:f4:ee:7e:c4:d1:a4:fa:1e:52:d5:a3:c0:
5b:5f:81:39:9c:98:6b:1a:f6:69:80:06:f2:0f:53:
c6:89:da:65:f0:d0:6e:55:52:7f:e3:0f:1f:49:d0:
20:f8:1d:aa:90:ac:cf:99:39:13:87:c7:61:f3:0b:
62:a3:65:93:fb:ff:90:26:33:b2:b3:03:01:08:33:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:D5:65:CF:22:05:A5:47:17:14:13:6A:46:50:DA:26:52:A2:E4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ff:91:4b:71:ce:f3:8d:0b:10:2e:17:bd:55:71:6e:57:7d:
14:10:4c:44:4f:a4:fc:d3:71:b0:bd:3d:a5:b7:57:88:52:4d:
f6:2f:75:39:09:ce:7b:e6:95:5e:0d:64:bd:f8:5e:2b:4b:0d:
f9:6c:9b:97:75:d9:6d:58:b6:e9:e2:d1:67:2e:27:a4:34:3e:
36:b4:b0:8a:48:38:b0:ce:f0:62:30:33:3d:c2:4c:a3:d2:10:
3f:4b:ff:d4:97:bd:7b:36:c5:67:a1:04:9c:82:37:25:e2:2e:
a9:d3:b5:96:d4:00:97:65:b3:64:39:08:f3:7c:6c:d2:13:cb:
14:97:7d:02:d9:34:8b:45:19:39:26:72:6a:26:af:04:38:5e:
15:5b:48:47:91:7d:99:69:f8:d5:18:88:0a:fe:6c:18:34:58:
c8:ab:ff:9f:e6:bd:66:0f:8a:b9:1e:23:e0:24:2c:31:73:aa:
1a:8f:23:42:ec:c1:6f:d7:6c:a3:4a:ba:a9:18:58:a8:3c:ab:
63:be:03:36:e0:be:ae:98:08:c2:2f:a4:50:56:46:f4:12:4d:
e4:52:35:b1:da:18:5b:75:26:7f:d4:af:ac:e7:e7:2b:5e:74:
a6:3e:b0:93:65:13:4c:56:d1:64:ce:44:56:ac:ff:cb:1d:87:
92:00:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:16:30 2025 by rpki-client